Subprocessors and Data Locations

Last updated 29 October 2026

Propsights runs on a small, fixed set of service providers. This page lists them, explains what each one handles and where, and tells you how you are notified before the list changes. It forms part of our Privacy Policy (Section 7) and Master Service Agreement (clause 10).

1. About this page

This page is part of both the Privacy Policy and the Master Service Agreement. It lists the service providers (subprocessors) that process information on Propsights' behalf, what each one does, and where your data is stored and processed.

  • Notice of changes. We update this page at least 14 days before a new subprocessor starts processing your information, and that update is our notice to you under clause 10.4 of the Master Service Agreement. In an emergency, such as a security issue or service failure, we may replace a provider straight away and update this page as soon as practicable.
  • Subscribe to updates. Email admin@axio360ventures.io with the subject "Subprocessor updates" to receive an email whenever this page changes. You can unsubscribe at any time.
  • Objection to a new subprocessor. If you have a reasonable objection to a new subprocessor, you may cancel by notifying us before it starts processing your data and receive a pro-rata refund of fees prepaid for the unused part of your subscription term.
  • Our standard. Every subprocessor is bound by contractual obligations to protect your data that are no less protective than the Master Service Agreement and the Privacy Policy, including the commitment that no data is ever used to train AI models.
  • Connections you make. Xero, QuickBooks and TaxSnap process your information only when you choose to connect them from within Propsights, and only for the data the connection needs. You can disconnect any of them at any time.

2. Current subprocessors

The table below lists our subprocessors as at the date at the top of this page.

Subprocessors
ProviderPurposeData involvedLocation
Amazon Web Services (AWS)Cloud hosting, databases, file storage and backupsAll service data (property records, documents, photos, emails you sync, messages, account details)Australia (Australian customers); United States (US customers)
OpenAIGenerating AI responses and sorting synced emails; no training, no data retainedPrompts, the property context needed to answer them, and emails being sortedUnited States
Microsoft (only if you connect a mailbox or calendar)Email and Outlook Calendar sync through the Microsoft Graph API, with read-only email accessMailbox emails and attachments, calendar event identifiers, authorisation tokensWhere your Microsoft mailbox is hosted
Google (only if you connect Drive or Calendar)Access to the Drive folders you explicitly select; create and manage calendar events for items you syncContent in selected folders, calendar event identifiers, authorisation tokensWhere your Google account data is hosted
Xero (only if you connect Xero)Accounting integration: syncing invoices, bills, payments and financial records between Propsights and your Xero organisationAccounting records (invoices, bills, payments, contacts, transactions), authorisation tokensWhere your Xero organisation is hosted
QuickBooks (only if you connect QuickBooks)Accounting integration: syncing invoices, bills, payments and financial records between Propsights and your QuickBooks companyAccounting records (invoices, bills, payments, contacts, transactions), authorisation tokensUnited States (Intuit)
TaxSnap (only if you connect TaxSnap)Tax data integration with your TaxSnap account, for tax records and preparationTax records, financial summaries and the property expense data you choose to share, authorisation tokensAustralia (Australian clients); United States (US clients and clients in other countries)
StripeSubscription billing and payment processing; card details are held by Stripe, not PropsightsBilling contact, payment details, transaction historyUnited States and other countries where Stripe operates

3. Where your data is stored

Your data is stored in the AWS region for your country. Your records, documents, synced emails and backups stay in that region.

  • Australian customers: AWS Australia. Your data stays in Australia.
  • United States customers: AWS United States. Your data stays in the United States.
  • Customers in other countries: AWS United States, unless we agree otherwise with you in writing.

4. Processing outside your storage region

Some processing happens outside the region where your data is stored:

  • AI processing. AI requests are processed by our AI provider (currently OpenAI, in the United States) solely to generate your response or sort emails. The provider does not retain your data; prompts and property context are processed and discarded. All your information is held in Propsights' own databases.
  • Support access. Our team, based in Australia, may access account data to provide support or keep the service secure, under strict role-based access controls.
  • For Australian customers, the only routine overseas disclosure is to our AI provider as described above. Before any overseas disclosure we take reasonable steps under APP 8 to ensure the recipient handles your information consistently with the Australian Privacy Principles, including through contractual protections, and we remain accountable for it.
  • For customers in other regions with data-transfer rules (such as the EU or UK), we use appropriate safeguards, such as standard contractual clauses, where required.

5. AI providers: no training, no retention

We may change the AI models, model versions or AI providers we use as the technology improves. Whichever provider or model we use:

  • No model training. Your account details, property records, documents, photos, emails, messages, prompts and AI responses are never used to train any AI model, ours or anyone else's.
  • No retention. Our AI provider does not retain your data. Prompts and property context are processed only to generate a response and are not stored by the provider.
  • Notice for new providers. Adding or replacing an AI provider is a subprocessor change under clause 10.4 of the Master Service Agreement, so it is announced on this page at least 14 days before processing starts. Changing models or model versions with the existing provider needs no notice.
  • Who to contact. Privacy questions: admin@axio360ventures.io. Sales and general support: info@propsights.io.
Subscribe to updates